WEBDIENSTE/volatility3
1
0
Fork 0
mirror of https://github.com/volatilityfoundation/volatility3.git synced 2026-09-06 01:37:39 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix up all the necessary components in the _LIST_ENTRY code.

Browse Source
This commit is contained in:
Mike Auty
2015-01-05 00:00:16 +00:00
parent fd2a94ba0b
commit 7c53ae31bb
1 changed files with 12 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
volatility/framework/symbols/windows/__init__.py
+12 -9
View File
@@ -18,21 +18,24 @@ class _LIST_ENTRY(objects.Struct, collections.abc.Iterable):
if layer is None:
layer = self.volinfo.layer_name
relative_offset = self._context.symbolspace.relative_child_offset(structure, member)
relative_offset = self._context.symbol_space.get_structure(structure).relative_child_offset(member)
direction = 'BLink'
direction = 'Blink'
if forward:
direction = 'FLink'
direction = 'Flink'
link = getattr(self, direction).dereference()
seen = set()
while link.offset not in seen:
if not sentinel:
yield self._context.object(structure, layer, offset = self.volinfo.offset - relative_offset)
object = self._context.Object(structure, layer, offset = link.offset)
yield object
seen = set([self.volinfo.offset])
while link.volinfo.offset not in seen:
seen.add(link.offset)
obj = self._context.object(structure, layer, offset = link.volinfo.offset - relative_offset)
yield obj
seen.add(link.volinfo.offset)
link = getattr(link, direction).dereference()
def __iter__(self):
self.to_list(self.parent.volinfo.structure_name, self.volinfo.member_name)
return self.to_list(self.volinfo.parent.volinfo.structure_name, self.volinfo.member_name)